| Max CVSS | 7.5 | Min CVSS | 6.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-0074 | 7.5 |
Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.
|
23-11-2020 - 19:49 | 22-04-2002 - 04:00 | |
| CVE-2006-6816 | 7.5 |
Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/
|
17-10-2018 - 21:49 | 29-12-2006 - 11:28 | |
| CVE-2007-0132 | 7.5 |
SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
16-10-2018 - 16:31 | 09-01-2007 - 11:28 | |
| CVE-2007-0134 | 7.5 |
Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE anal
|
16-10-2018 - 16:31 | 09-01-2007 - 11:28 | |
| CVE-2007-0152 | 7.5 |
OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb.
|
16-10-2018 - 16:31 | 09-01-2007 - 18:28 | |
| CVE-2007-0115 | 6.0 |
Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, wh
|
16-10-2018 - 16:31 | 09-01-2007 - 02:28 | |
| CVE-2006-5110 | 6.8 |
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2006-5074. NOTE: the provenance of this information is unknown;
|
20-07-2017 - 01:33 | 03-10-2006 - 04:03 | |
| CVE-2007-0133 | 7.5 |
Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter.
|
08-03-2011 - 02:48 | 09-01-2007 - 11:28 |